Mitel
Page 2 of 2 — Mitel CVEs from a corpus of 135, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-10211 | Critical | 9.8 | 2020-04-17 | A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbit… |
CVE-2019-19608 | Critical | 9.8 | 2020-03-02 | A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficie… |
CVE-2019-19607 | Critical | 9.8 | 2020-03-02 | A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient… |
CVE-2019-19371 | Medium | 6.1 | 2020-03-02 | A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to co… |
CVE-2019-19370 | Medium | 6.1 | 2020-03-02 | A cross-site scripting (XSS) vulnerability in the web conferencing component of the Mitel MiCollab application before 9.0.15 for Android could allow an unauthe… |
CVE-2019-18863 | Medium | 5.9 | 2020-03-02 | A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could a… |
CVE-2020-9379 | Medium | 6.5 | 2020-02-25 | The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to acce… |
CVE-2019-19891 | Medium | 5.9 | 2020-01-13 | An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-in-the-middle attack. A successful explo… |
CVE-2018-18819 | Medium | 5.3 | 2019-11-12 | A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP2 (8.0.2.202)… |
CVE-2019-12165 | Critical | 9.8 | 2019-05-29 | MiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and earlier, and 7.1 (7.1.0.57) and earlier and MiCollab AWV 6.3 (6.3.0.103), 6.2 (6.2.2.8), 6.1 (6.1… |
CVE-2018-18285 | Critical | 9.8 | 2019-04-25 | SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient… |
CVE-2018-18286 | Critical | 9.8 | 2019-04-25 | SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient… |
CVE-2018-19275 | Critical | 9.8 | 2019-04-02 | The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain… |
CVE-2019-9593 | Medium | 6.1 | 2019-03-06 | A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via… |
CVE-2019-9592 | Medium | 6.1 | 2019-03-06 | A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via… |
CVE-2019-9591 | Medium | 6.1 | 2019-03-06 | A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or H… |
CVE-2018-16226 | Medium | 6.1 | 2018-10-23 | A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an unauthenticated attacker to con… |
CVE-2018-15497 | Critical | 9.8 | 2018-10-23 | The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue rem… |
CVE-2018-12901 | Medium | 6.1 | 2018-10-23 | A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 (19.49.9400.0) and earlier, could allow an unauthenticated attacker to conduct a… |
CVE-2016-6562 | High | 7.5 | 2018-07-13 | On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which… |
CVE-2018-3639 | Medium | 5.5 | 2018-05-22 | Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are know… |
CVE-2018-9104 | Medium | 6.1 | 2018-04-25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (1… |
CVE-2018-9103 | Medium | 6.1 | 2018-04-25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (1… |
CVE-2018-9102 | Medium | 6.5 | 2018-04-25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (1… |
CVE-2018-9101 | Medium | 6.1 | 2018-04-25 | A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (1… |
CVE-2018-5782 | Critical | 9.8 | 2018-03-14 | A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allo… |
CVE-2018-5781 | Critical | 9.8 | 2018-03-14 | A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allo… |
CVE-2018-5780 | Critical | 9.8 | 2018-03-14 | A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allo… |
CVE-2018-5779 | Critical | 9.8 | 2018-03-14 | A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allo… |
CVE-2017-16251 | High | 8.8 | 2018-03-13 | A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious script to the… |
CVE-2017-16250 | Medium | 5.3 | 2018-03-13 | A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used t… |
CVE-2014-0160 | High | 7.5 | 2014-04-07 | The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to ob… |
CVE-2008-6797 | | 2009-05-07 | The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensit… | |
CVE-2004-0945 | | 2005-02-28 | The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a denial of ser… | |
CVE-2004-0944 | | 2004-02-28 | The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows… |